topic Re: XIQ AP Import Workflow Error - Unable to Pull Device List in ExtremeCloud IQ- Site Engine Management Center

XIQ AP Import Workflow Error - Unable to Pull Device List

cameront2445 — Tue, 17 Jun 2025 12:14:53 GMT

We are trying to bring in Universal APs that are managed in XIQ. We use XIQ-SE for NAC for BYOD access.

This is something that one of our Extreme SE provided partners set up for our organization, who no longer works at Extreme. GTAC Support told me to post the question here, so here I am.

We have used this workflow flawlessly without error for the past 2 years up until now. Nothing has changed in either of our environments (XIQ or XIQ-SE).
Any insight as to what could be causing the error? See the attached image.

Thanks in advance for any replies.

Re: XIQ AP Import Workflow Error - Unable to Pull Device List

Zdeněk_Pala — Tue, 17 Jun 2025 13:08:26 GMT

There is updated version of this workflow available. Check https://github.com/extremenetworks/ExtremeScripting/blob/master/XMC_XIQ-SE/oneview_workflows/README.md#xiq-site-engine-xmc-daily-job-workflows

XIQ AP import

This workflow automatically adds APs from Extreme Cloud IQ to XIQ-SE and to ExtremeControl. Make sure the APs support SNMP using the Network Policies and device templates.

You may consider to update the variables like NAC_GROUP or SHARED_SECRET if needed.

Hope it helps

Re: XIQ AP Import Workflow Error - Unable to Pull Device List

RobertD1 — Tue, 17 Jun 2025 13:29:06 GMT

Could it be your API token has expired under Global Settings if someone else set this up for you there might be an API step to check? But would expect output to say authentication failed, your output message is unable to pull device list.

Re: XIQ AP Import Workflow Error - Unable to Pull Device List

cameront2445 — Thu, 19 Jun 2025 12:26:00 GMT

Where are these workflow files "typically" stored at on XIQ-SE if we are dropping the file into the server via WinSCP?

Since an Extreme SE built this for our organization, we have no knowledge of these types of processes. And Extreme's KB don't appear to provide much guidance on best practices.

Re: XIQ AP Import Workflow Error - Unable to Pull Device List

RobertD1 — Mon, 23 Jun 2025 12:51:17 GMT

Go to Tasks>Workflows to see the workflows that have been imported. Best you download and import the latest one Zdenek pointed you at and go from there. There was an older workflow which needed the bearer token adding to the script which might be what you are using and that token could have expired. Best you use the latest and reach out to your local SE or update everyone here as someone may be using the latest one and can advise on how to use the workflow if anything needs adding to XIQ Global Settings API Management?

Edit: The latest workflow uses a different method to check XIQ which is to provide the XIQ username and password. In your world site hierarchy you can have a site for APs and set the site action 'Add Device to Access Control Engine Group' I believe.

Re: XIQ AP Import Workflow Error - Unable to Pull Device List

cameront2445 — Tue, 24 Jun 2025 11:00:40 GMT

Found in XIQ-SE where to import the scripts from GUI. Since we have not had to import scripts into XIQ-SE, the gear button in the bottom left corner of the workflows menu was not obvious. Additionally, the focus has to be set to a group top level menu and not on a specific existing workflow (otherwise if an existing workflow is selected, the import button is greyed out).

But I imported the new script, mirrored all of the same variables and accounts to used (verified account being used is passes login to XIQ), workflow is still failing with the same error.

I do need to verify the API token status.

I have reached out to our new Extreme SE and they are going to start investigating.

Re: XIQ AP Import Workflow Error - Unable to Pull Device List

cameront2445 — Wed, 02 Jul 2025 11:22:16 GMT

The root cause of the error we were receiving was because of the existing XIQ user account that was being used in the XIQ AP Import workflow within XIQ-SE suddenly stopped working.
The Extreme SE did state that XIQ recently released a "scopes" feature which could have possibly caused the user account to be exposed to incorrect set parameters within XIQ. In XIQ when we attempted to set/update the existing XIQ user account used to pull XIQ APs in to XIQ-SE as the scope for all locations, the page would error out.

Our solution was to simply create a new XIQ User account, update the XIQ AP Import workflow with the new user account, and the workflow began completing as expected.

Since we were using an XIQ user account to pull APs in to our XIQ-SE environment, API tokens were not a factor in play.

Re: XIQ AP Import Workflow Error - Unable to Pull Device List

bgharti — Tue, 15 Jul 2025 06:42:55 GMT

- After the data migration from MySQL to PostgreSQL as part of the upgrade from ExtremeCloud IQ Site Engine version 24.2 to 25.5.11.14, we encountered an issue with the AP import workflow.

After importing the relevant script into XIQ-SE from the given link, the workflow executes successfully through the Prep, XIQ, and XIQ-SE stages. However, it consistently fails during the Update step. Below is the error captured in the log:

16:27:34 INFO LOG file /dev/shm/174_Workflows_XIQ-AP-import/update.log
Traceback (most recent call last):
File "<string>", line 256, in <module>
File "<string>", line 169, in main
KeyError: locationId

Traceback (most recent call last):
File "<string>", line 256, in <module>
File "<string>", line 169, in main
KeyError: locationId

To troubleshoot, we created a new user in XIQ with full administrative access and ensured it had visibility across all location scopes. Despite this, the error persists.

Has anyone encountered a similar issue or found a resolution? Any insights or suggestions would be greatly appreciated.

Thank you in advance for your support.